docs: fix Homebrew 6 install commands

[desimone]

Summary

Homebrew 6 refuses to load untrusted third-party formulae and casks, so the documented brew tap pomerium/tap followed by a short-name install now fails before Homebrew can load the Pomerium package.

Install by fully-qualified name instead. Homebrew taps the repository and trusts only the named Pomerium formula or cask, avoiding a broader trust grant for everything in the tap. Each tab also gives existing users the fully-qualified upgrade command that resolves the same refusal.

Related

• ENG-4286
• Homebrew tap trust model

Testing

• yarn format-check
• yarn cspell
• yarn build

The CLI and Desktop install commands were tested with Homebrew 6.0.13 from a clean, untrusted state. Both trusted only the named package and proceeded successfully. Homebrew 6.0.13's cmd/upgrade.rb routes fully-qualified upgrade arguments through the same item-specific trust path. The local trust store was restored after testing.

AI disclosure

Claude Code diagnosed the trust-gate failure and drafted the initial edits. Codex verified the Homebrew behavior, refined the wording, and ran the final repository checks.

Checklist

• reference any related issues
• disclosed AI usage (or wrote "none") per AI_POLICY.md

[netlify]

✅ Deploy Preview for pomerium-docs ready!

Name	Link
🔨 Latest commit	015f8fb
🔍 Latest deploy log	https://app.netlify.com/projects/pomerium-docs/deploys/6a69152f7a0b1f0007cacec4
😎 Deploy Preview	https://deploy-preview-2333--pomerium-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[greptile-apps]

Greptile Summary

Updates the Homebrew instructions for Homebrew 6’s third-party tap trust model.

• Uses fully qualified formula and cask names for Pomerium CLI and Desktop installation.
• Adds fully qualified upgrade commands and explains their package-specific trust behavior.

Confidence Score: 5/5

The PR appears safe to merge with no actionable defects identified.

The fully qualified Homebrew commands match the intended package-specific trust flow, and the accompanying documentation consistently covers both CLI and Desktop installation and upgrade paths.

Important Files Changed

Filename	Overview
content/docs/deploy/clients/clients.mdx	Replaces the legacy tap-first Homebrew commands with tested, fully qualified install and upgrade commands for Pomerium CLI and Desktop.

_{Reviews (1): Last reviewed commit: "docs: fix Homebrew 6 install commands" | Re-trigger Greptile}